net.ymate.framework.webmvc.intercept.RequestTokenInterceptor.java Source code

Introduction

Here is the source code for net.ymate.framework.webmvc.intercept.RequestTokenInterceptor.java

Source

/*
 * Copyright 2007-2017 the original author or authors.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package net.ymate.framework.webmvc.intercept;

import net.ymate.framework.core.Optional;
import net.ymate.framework.core.support.TokenProcessHelper;
import net.ymate.platform.core.beans.intercept.IInterceptor;
import net.ymate.platform.core.beans.intercept.InterceptContext;
import net.ymate.platform.webmvc.context.WebContext;
import net.ymate.platform.webmvc.util.CookieHelper;
import net.ymate.platform.webmvc.view.impl.HttpStatusView;
import org.apache.commons.lang.StringUtils;

import javax.servlet.http.HttpServletRequest;

/**
 * ????
 *
 * @author  (suninformation@163.com) on 2017/11/22 ?3:05
 * @version 1.0
 */
public class RequestTokenInterceptor implements IInterceptor {

    @Override
    public Object intercept(InterceptContext context) throws Exception {
        switch (context.getDirection()) {
        case BEFORE:
            HttpServletRequest _request = WebContext.getRequest();
            String _tokenName = context.getContextParams().get(Optional.REQUEST_TOKEN_NAME);
            if (StringUtils.isBlank(_tokenName)) {
                _tokenName = StringUtils.defaultIfBlank(
                        context.getOwner().getConfig().getParam(Optional.REQUEST_TOKEN_NAME), "Request-Token");
            }
            // ???Cookies?
            boolean _headerFlag = false;
            boolean _cookieFlag = false;
            CookieHelper _cookieHelper = null;
            String _tokenStr = _request.getParameter(_tokenName);
            if (StringUtils.isBlank(_tokenStr)) {
                _tokenStr = _request.getHeader(_tokenName);
                if (StringUtils.isBlank(_tokenStr)) {
                    _cookieHelper = CookieHelper.bind();
                    _tokenStr = _cookieHelper.getCookie(_tokenName).toStringValue();
                    _cookieFlag = StringUtils.isNotBlank(_tokenStr);
                } else {
                    _headerFlag = true;
                }
            }
            // ?
            boolean _flag = TokenProcessHelper.getInstance().isTokenValid(_request, _tokenName, _tokenStr, true);
            // ??, ??
            if (_headerFlag || _cookieFlag) {
                _tokenStr = TokenProcessHelper.getInstance().saveToken(_request, _tokenName);
                if (_headerFlag) {
                    WebContext.getResponse().addHeader(_tokenName, _tokenStr);
                    CookieHelper.bind().removeCookie(_tokenName);
                } else {
                    _cookieHelper.setCookie(_tokenName, _tokenStr);
                }
            }
            // ??
            if (!_flag) {
                return HttpStatusView.BAD_REQUEST;
            }
            break;
        }
        return null;
    }
}